aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGravatar Joe Banks <[email protected]>2024-08-31 13:12:19 +0100
committerGravatar Joe Banks <[email protected]>2024-08-31 13:12:19 +0100
commit51805ff1de29b4b044ed6290d5ed7e0ad16bfccb (patch)
treee6db6892b4571d9e117ceecd08e2f7b1450a26bf
parentAdd tasks to template and enable DMARC inbox sieve filter (diff)
Run DMARC inbox setup and dmarc_metrics_exporter role on mail hosts
-rw-r--r--ansible/host_vars/lovelace/dmarc_metrics.yml13
-rw-r--r--ansible/playbook.yml12
2 files changed, 25 insertions, 0 deletions
diff --git a/ansible/host_vars/lovelace/dmarc_metrics.yml b/ansible/host_vars/lovelace/dmarc_metrics.yml
new file mode 100644
index 0000000..0331a47
--- /dev/null
+++ b/ansible/host_vars/lovelace/dmarc_metrics.yml
@@ -0,0 +1,13 @@
+---
+dmarc_metrics_imap_username: "dmarc"
+dmarc_metrics_imap_host: "mail.pydis.wtf"
+dmarc_metrics_imap_password: !vault |
+ $ANSIBLE_VAULT;1.1;AES256
+ 37373961393432616163383330616634643639353537353964346361343938653661346662386131
+ 6338343631373264393237666661333739353430313666340a393236313536303935353230363165
+ 65323537626336353731313165643935386233373439386237623662613632386135316564653365
+ 3662396363386362380a386338323834383732343232616666353938323435643338643862623533
+ 35623234393534623638346635386661313831643864396561663335373034653335
+dmarc_metrics_folder_inbox: "Reports.New"
+dmarc_metrics_folder_done: "Reports.Done"
+dmarc_metrics_folder_error: "Reports.Invalid"
diff --git a/ansible/playbook.yml b/ansible/playbook.yml
index 643e4b3..3bb622d 100644
--- a/ansible/playbook.yml
+++ b/ansible/playbook.yml
@@ -22,12 +22,24 @@
roles:
- opendkim
- opendmarc
+ - opendmarc-inbox
- sasl
- dovecot
- dovecot-monitoring
- spamassassin
- postfix
- prometheus-postfix-exporter
+ - role: dmarc_metrics_exporter
+ vars:
+ imap_username: "{{ dmarc_metrics_imap_username }}"
+ imap_password: "{{ dmarc_metrics_imap_password }}"
+ imap_host: "{{ dmarc_metrics_imap_host }}"
+ folder_inbox: "{{ dmarc_metrics_folder_inbox }}"
+ folder_done: "{{ dmarc_metrics_folder_done }}"
+ folder_error: "{{ dmarc_metrics_folder_error }}"
+ listen_addr: "{{ ansible_wg0.ipv4.address }}"
+ tags:
+ - role::dmarc-metrics-exporter
- name: Deploy our monitoring stack
hosts: monitoring